Prosím o preventivní kontrolu Vyřešeno

[Clorky]

Přeinstalovával jsem Avast na Eset, jenž jsem měl zdarma - taky dělám čístku PC, tak se na to prosím mrkněme.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:46:30, on 4. 5. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
CHROME: 50.0.2661.94

Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Users\Petr\AppData\Local\Steam\Realtek HD\rthdcpl.exe
C:\Program Files (x86)\Eurobattle.net\xpam.exe
C:\Program Files (x86)\Eurobattle.net\gproxy.exe
C:\hry\Warcraft III\war3.exe
C:\Program Files (x86)\GRETECH\GomAudio\Goma.exe
E:\Hlavní složky\Stažené soubory\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SteelSeries Engine] C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [iFunBox] C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe /tray
O4 - HKCU\..\Run: [Lync] "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: TEMP.bat
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.2 ... rol_32.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4}: NameServer = 4.2.2.3,4.2.2.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: ACP User Service (amdacpusrsvc) - Advanced Micro Devices - C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDevice.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11172 bytes

[Reklama]

[jaro3]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[Clorky]

Adw:
# AdwCleaner v5.115 - Log soubor vytvořen 04/05/2016 o 17:55:21
# Aktualizováno 01/05/2016 by Xplode
# Databáze : 2016-05-04.2 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : Petr - I5-PETR
# Spuštěno z : E:\Hlavní složky\Stažené soubory\adwcleaner_5.115.exe
# Volba : Skenovat
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

Složka nalezeno : C:\Program Files (x86)\globalUpdate
Složka nalezeno : C:\Users\Petr\AppData\Local\globalUpdate

***** [ Soubory ] *****


***** [ DLL ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****

Úkol nalezeno : amiupdaterExd
Úkol nalezeno : amiupdaterExi
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-10_user
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user
Úkol nalezeno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7

***** [ Registr ] *****

Klávesa nalezeno : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
Klávesa nalezeno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Klávesa nalezeno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
Klávesa nalezeno : HKLM\SOFTWARE\8761d259-9b86-49d7-ac49-e79f137133e6
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Klávesa nalezeno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Klávesa nalezeno : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Klávesa nalezeno : HKCU\Software\GlobalUpdate
Klávesa nalezeno : HKCU\Software\InstalledBrowserExtensions
Klávesa nalezeno : HKCU\Software\OB
Klávesa nalezeno : HKCU\Software\PRODUCTSETUP
Klávesa nalezeno : HKCU\Software\SavePass 1.1
Klávesa nalezeno : HKCU\Software\csastats
Klávesa nalezeno : HKCU\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKCU\Software\AppDataLow\Software\Crossrider
Klávesa nalezeno : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
Klávesa nalezeno : HKLM\SOFTWARE\GlobalUpdate
Klávesa nalezeno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klávesa nalezeno : HKLM\SOFTWARE\SavePass 1.1
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klávesa nalezeno : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\GlobalUpdate
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\InstalledBrowserExtensions
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\OB
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\PRODUCTSETUP
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\SavePass 1.1
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\csastats
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\AppDataLow\Software\Crossrider
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
Klávesa nalezeno : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E

***** [ Webové prohlížeče ] *****


*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [10924 bytes] - [04/05/2016 17:55:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [10998 bytes] ##########

[Clorky]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 4. 5. 2016
Čas skenování: 17:55:14
Protokol:
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2016.05.04.05
Databáze rootkitů: v2016.04.17.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: Petr

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 430957
Uplynulý čas: 4 min, 47 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 153
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\APPID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassSvc, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [974e7c55fa9f9f97e64753b0e12251af],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\APPID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3COMClassService, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3COMClassService.1.0, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}, , [15d0448d3a5f0432e050c0438b7829d7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass.1, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoreClass, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass.1, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoreClass.1, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}, , [05e0a72abbde979fa38bb64dcc377d83],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}, , [8f5618b93a5f96a01123e81bde25728e],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}, , [8f5618b93a5f96a01123e81bde25728e],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebSvc, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebSvc.1.0, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}, , [da0bc809d2c70e28b085788baa599769],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [00e5725f1e7b4de9220dc340956eef11],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [00e5725f1e7b4de9220dc340956eef11],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [00e5725f1e7b4de9220dc340956eef11],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickCtrl.10, , [00e5725f1e7b4de9220dc340956eef11],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [00e5725f1e7b4de9220dc340956eef11],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickProcessLauncherMachine, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickProcessLauncherMachine.1.0, , [d1145f72d9c05bdb3ef3778cba49fd03],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [9b4a3c951287f244d267cb38b64d38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [9b4a3c951287f244d267cb38b64d38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [9b4a3c951287f244d267cb38b64d38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.Update3WebControl.4, , [9b4a3c951287f244d267cb38b64d38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [9b4a3c951287f244d267cb38b64d38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher, , [e2031cb5198074c273c4db2819ea4ab6],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, , [d60f775aabee4cea43f423e01ae9f808],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher, , [d60f775aabee4cea43f423e01ae9f808],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, , [d60f775aabee4cea43f423e01ae9f808],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.ProcessLauncher, , [d60f775aabee4cea43f423e01ae9f808],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.ProcessLauncher.1.0, , [d60f775aabee4cea43f423e01ae9f808],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine, , [984d23ae0b8e6dc96ed014ef07fc837d],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, , [faeb557c0693d75fc17d38cbe71cfa06],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine, , [faeb557c0693d75fc17d38cbe71cfa06],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, , [faeb557c0693d75fc17d38cbe71cfa06],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebMachine, , [faeb557c0693d75fc17d38cbe71cfa06],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebMachine.1.0, , [faeb557c0693d75fc17d38cbe71cfa06],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, , [f5f0ae23a6f369cd6cd1b152ea1911ef],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, , [16cf09c8f7a2e254a796ff043dc626da],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, , [16cf09c8f7a2e254a796ff043dc626da],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, , [16cf09c8f7a2e254a796ff043dc626da],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebMachineFallback, , [16cf09c8f7a2e254a796ff043dc626da],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.Update3WebMachineFallback.1.0, , [16cf09c8f7a2e254a796ff043dc626da],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass, , [9b4a7b56861362d449ea47bc7b88d22e],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, , [bb2aa52cb3e61d1987ac709353b0d42c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass, , [bb2aa52cb3e61d1987ac709353b0d42c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, , [bb2aa52cb3e61d1987ac709353b0d42c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoreMachineClass, , [bb2aa52cb3e61d1987ac709353b0d42c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoreMachineClass.1, , [bb2aa52cb3e61d1987ac709353b0d42c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, , [c1243d94396087afe052689b04ffbf41],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, , [e2035a77752470c6f939d33021e2f10f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, , [e2035a77752470c6f939d33021e2f10f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, , [e2035a77752470c6f939d33021e2f10f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassMachineFallback, , [e2035a77752470c6f939d33021e2f10f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, , [e2035a77752470c6f939d33021e2f10f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, , [e6ffc60bf5a4bc7a2115cf34ef14f30d],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, , [588df1e0b5e42610fc3a37cc6b98817f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, , [588df1e0b5e42610fc3a37cc6b98817f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, , [588df1e0b5e42610fc3a37cc6b98817f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CredentialDialogMachine, , [588df1e0b5e42610fc3a37cc6b98817f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CredentialDialogMachine.1.0, , [588df1e0b5e42610fc3a37cc6b98817f],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, , [7570b0219efb0036211722e104ff0000],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, , [9253ae23e9b08da91f19e22190737f81],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, , [9253ae23e9b08da91f19e22190737f81],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, , [9253ae23e9b08da91f19e22190737f81],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassMachine, , [9253ae23e9b08da91f19e22190737f81],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, , [9253ae23e9b08da91f19e22190737f81],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync, , [489da9288613e84e56e5cf34ab58669a],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, , [9d48fcd54f4a8caa55e659aa46bd45bb],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync, , [9d48fcd54f4a8caa55e659aa46bd45bb],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, , [9d48fcd54f4a8caa55e659aa46bd45bb],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoCreateAsync, , [9d48fcd54f4a8caa55e659aa46bd45bb],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdateUpdate.CoCreateAsync.1.0, , [9d48fcd54f4a8caa55e659aa46bd45bb],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE, , [4f9606cb0b8e6bcbafbd0f2c28dc2bd5],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE, , [c421874a8e0bee48ef7d0d2e758f09f7],
PUP.Optional.CrossRider, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, , [697cdbf63d5c55e19b79a390a16302fe],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{1AC117CC-1BFC-41CD-B35F-458F4F2B8EF2}, , [697c4a87f2a7999df613684e25df21df],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{44FB62CD-7A44-4248-98E2-C5992DE99957}, , [9b4aba172a6f072f74950ea849bb6d93],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5589C148-7BD4-4512-97F9-C76A1EB2519E}, , [ab3ab71a5742d2644ebb259129dba55b],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5F3A46CA-F9E6-4421-BE53-0DB061BD3A26}, , [9055a9287a1f6ec84bbea313c04456aa],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{716A687E-E63C-4824-A7A8-ABD71860723B}, , [19ccce038e0bce6818f1f4c2e3216799],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7A1BE216-90B9-44FD-B12E-353291962B3F}, , [8d58a829d8c1a69016f3bbfb7a8a1ae6],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E4B7B98F-B25A-4379-A140-1E459306D86E}, , [994cdcf57b1eda5c11f8c8ee976d06fa],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F48E8608-DF5E-4AC8-9354-F8208292F2EA}, , [469f8150039658de8485cfe79173af51],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7, , [6d78f7da7f1a0135bb5d1a1956aea65a],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-10_user, , [d213428f514849ed23f572c10df7ba46],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11, , [6382f6dbbedb8fa759bf1c17996b49b7],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13, , [21c47061d8c12a0cb860b182dd279d63],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3, , [7e67468b59405adcd840042f40c4b44c],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5, , [6580ab26b0e97cbade3aa58e7094ea16],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user, , [c71ef8d90d8cad89001845ee0004dc24],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7, , [667fc908a9f0300675a3ba791ee643bd],
PUP.Optional.AmiUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\amiupdaterExd, , [7471e6eb871237ffacfe39ec689cf709],
PUP.Optional.AmiUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\amiupdaterExi, , [469fd9f82c6d85b1bbef54d153b142be],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1, , [d114468b7c1dd1656a7a6be717ed6997],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv, , [f7ee1ab7a0f95adce20297bb2adadc24],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv-edge, , [10d5725f5f3a8fa7fce8ed65c3418d73],
PUP.Optional.SavePass, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv-ie, , [5392fdd4f5a4cf6744a03e141ce8d927],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [1acb765b0b8eb77fe727959e9371c040],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [e5001fb2a9f080b62d61b5b716ee2ed2],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE, , [22c309c839609d993f2d3ffc1de73bc5],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE\Clients, , [d70e7b5625742a0c5d1385b6cc38649c],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [5a8b80512475ba7c86ff5e45e0244fb1],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\29777, , [4c993d9475241224c1537cb727dd38c8],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}, , [2fb63e93c0d9e94d25e7445da55f39c7],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [3fa6ba1753467bbb027291aa6d97f20e],
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [edf8a1303b5eee48086b74c710f42dd3],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [0dd8e4ed9009310526eae34fea1a1be5],
PUP.Optional.Cinema, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\CinemaP-1.9cV23.10-nv-ie, , [15d006cb2574c57163beb4786d97c23e],
PUP.Optional.InstallCore, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\csastats, , [eef7ba17b0e90e2828114677d13336ca],
PUP.Optional.SavePass, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\SavePass 1.1, , [8b5a2ea3eaaf0234d60a6ee4966e8878],
PUP.Optional.SavePass, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\SavePass 1.1-nv, , [0ed7c50c811896a0d20e450d26de7b85],
PUP.Optional.SavePass, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\SavePass 1.1-nv-edge, , [f9ec00d1b6e31b1b746c272b42c25ba5],
PUP.Optional.SavePass, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\SavePass 1.1-nv-ie, , [5a8b08c91b7ec76fc7190a4864a021df],
PUP.Optional.CrossRider, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [75701bb6811875c1100084aedc289c64],
PUP.Optional.CrossRider, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [b72edef3cccd7cbac848b67ccf35c040],
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, , [30b56c651b7e3df973fc69d25fa504fc],
PUP.Optional.CrossRider, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, , [776e7e532a6f78be5dc2260c4eb6837d],
PUP.Optional.CrossRider, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\OB, , [786dffd28a0fc86ef3b053dfae56e719],
PUP.Optional.OutBrowse, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\OB, , [9253d2ff7f1a360059ac74d87a8a29d7],
PUP.Optional.CrossRider, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [7c693c95afeac2742478c489de259e62],

Hodnoty registru: 17
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [4f9606cb0b8e6bcbafbd0f2c28dc2bd5]
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [c421874a8e0bee48ef7d0d2e758f09f7]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{1AC117CC-1BFC-41CD-B35F-458F4F2B8EF2}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-10_user, , [697c4a87f2a7999df613684e25df21df]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{44FB62CD-7A44-4248-98E2-C5992DE99957}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11, , [9b4aba172a6f072f74950ea849bb6d93]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5589C148-7BD4-4512-97F9-C76A1EB2519E}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7, , [ab3ab71a5742d2644ebb259129dba55b]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5F3A46CA-F9E6-4421-BE53-0DB061BD3A26}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5, , [9055a9287a1f6ec84bbea313c04456aa]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{716A687E-E63C-4824-A7A8-ABD71860723B}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3, , [19ccce038e0bce6818f1f4c2e3216799]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7A1BE216-90B9-44FD-B12E-353291962B3F}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7, , [8d58a829d8c1a69016f3bbfb7a8a1ae6]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E4B7B98F-B25A-4379-A140-1E459306D86E}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user, , [994cdcf57b1eda5c11f8c8ee976d06fa]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F48E8608-DF5E-4AC8-9354-F8208292F2EA}|Path, \a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13, , [469f8150039658de8485cfe79173af51]
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [22c309c839609d993f2d3ffc1de73bc5]
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe, , [5a8b80512475ba7c86ff5e45e0244fb1]
PUP.Optional.GlobalUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}|DisplayName, globalupdate Helper, , [2fb63e93c0d9e94d25e7445da55f39c7]
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, , [30b56c651b7e3df973fc69d25fa504fc]
PUM.Optional.LowRiskFileTypes, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\ASSOCIATIONS|LowRiskFileTypes, .avi;.bat;.com;.cmd;.exe;.htm;.html;.lnk;.mpg;.mpeg;.mov;.mp3;.msi;.m3u;.rar;.reg;.txt;.vbs;.wav;.zip;, , [06df8e43a0f9c472997e8a0906feae52]
PUP.Optional.OutBrowse, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\OB|monitype14, 10/23/15 15:40:31, , [9253d2ff7f1a360059ac74d87a8a29d7]
PUP.Optional.OutBrowse, HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\OB|monitype21, 10/23/15 15:41:27, , [ab3a963b8f0ae15541c4f25aa064827e]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 10
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Download, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Download\{D99C58D4-3B75-482C-8693-23DA98F73C61}, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Download\{D99C58D4-3B75-482C-8693-23DA98F73C61}\1.3.25.34, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Download\{E9B3DBA2-5707-47E2-B2B4-3368CCA25817}, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Download\{E9B3DBA2-5707-47E2-B2B4-3368CCA25817}\1.3.25.34, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Install, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Offline, , [22c3aa27d3c60e28b2e3a67334cf9c64],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\Offline\{8A9CDF91-F2A7-4CFE-AF9F-D9942B3C7E22}, , [22c3aa27d3c60e28b2e3a67334cf9c64],

Soubory: 18
PUP.Optional.Downloader, C:\Windows\chromebrowser.exe, , [5c893899f4a50c2a59ae30fbd92cb050],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7, , [4e97854cabee5ed8566864bfa0642ed2],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11, , [fbea6c65debbfe386955bc67b64e33cd],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13, , [db0a488936630f27407e8d96000434cc],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3, , [a045e2ef158439fd308e54cf4cb84ab6],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5, , [5491d7fac5d4b680209e44df08fc6c94],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user, , [c81d5e732475072fdce2de4519eb956b],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7, , [499c5a77465378be645a2ff49b695da3],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7.job, , [a342ebe6cdccc96d239c7ba81ce8b24e],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-10_user.job, , [28bd2da46a2fe0563d82a0837f85837d],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11.job, , [bd280ec3fc9dc472ebd4e43f0bf937c9],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13.job, , [bc295f72b8e11125308fd94a867e7789],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3.job, , [f6efb41d2d6c86b0a619f62d70947789],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5.job, , [6b7a765b7a1fd85ead1248dbfc08cf31],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user.job, , [3ea74f82168381b59629f03302028c74],
PUP.Optional.CrossRider, C:\Windows\Tasks\a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7.job, , [8c5961704356082e7b4473b05aaa03fd],
Trojan.Downloader, C:\Windows\chromebrowser.exe, , [509519b8d6c30a2ca9483184cf35ff01],
PUP.Optional.GlobalUpdate, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateHelper.msi, , [22c3aa27d3c60e28b2e3a67334cf9c64],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Cleaning (Vymazat)“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu Malwarebytes' Anti-Malware a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7,8,10 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“ , v okně pak na „Open TXT“ a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Clorky]

Mbam čisto, adw:
# AdwCleaner v5.115 - Log soubor vytvořen 04/05/2016 o 18:03:06
# Aktualizováno 01/05/2016 by Xplode
# Databáze : 2016-05-04.2 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : Petr - I5-PETR
# Spuštěno z : E:\Hlavní složky\Stažené soubory\adwcleaner_5.115.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\Program Files (x86)\globalUpdate
[-] Složka smazáno : C:\Users\Petr\AppData\Local\globalUpdate

***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****

[-] Úkol smazáno : amiupdaterExd
[-] Úkol smazáno : amiupdaterExi
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-10_user
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-1-7
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-11
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-13
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-3
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-5_user
[-] Úkol smazáno : a4bcabe6-c4ca-4285-b302-29fcab1c2f44-7

***** [ Registr ] *****

[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Klávesa smazáno : HKLM\SOFTWARE\8761d259-9b86-49d7-ac49-e79f137133e6
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klávesa smazáno : HKCU\Software\GlobalUpdate
[-] Klávesa smazáno : HKCU\Software\InstalledBrowserExtensions
[-] Klávesa smazáno : HKCU\Software\PRODUCTSETUP
[-] Klávesa smazáno : HKLM\SOFTWARE\GlobalUpdate
[-] Klávesa smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Klávesa smazáno : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
[-] Klávesa smazáno : HKU\S-1-5-21-1292206800-3816184836-4294836885-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E

***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [5743 bytes] - [04/05/2016 18:03:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [11090 bytes] - [04/05/2016 17:55:21]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5890 bytes] ##########

[Clorky]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 10 Pro x64
Ran by Petr (Administrator) on st 04. 05. 2016 at 20:11:21,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 10

Successfully deleted: C:\ProgramData\1445614187.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445615792.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616342.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616347.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616370.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616381.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616634.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616647.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616666.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1445616670.bdinstall.bin (File)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 04. 05. 2016 at 20:12:15,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Clorky]

RogueKiller V12.1.5.0 (x64) [May 2 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10240) 64 bits version
Spuštěno : Normální režim
Uživatel : Petr [Práva správce]
Started from : E:\Hlavní slo?ky\Sta?ené soubory\RogueKillerX64.exe
Mód : Prohledat -- Datum : 05/04/2016 20:24:54

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 10 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6e1cbc1c-495c-4c84-9900-9ecd79bf5abb} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6e1cbc1c-495c-4c84-9900-9ecd79bf5abb} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2} | DhcpNameServer : 10.0.0.138 ([]) -> Nalezeno
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno

¤¤¤ Úlohy : 1 ¤¤¤
[Suspicious.Path|VT.not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.gen] \Realtek HD Audio -- "C:\Users\Petr\AppData\Local\Steam\Realtek HD\rthdcpl.exe" (08411Fb00C53f6C62A15369081848288aD771Fe0) -> Nalezeno

¤¤¤ Soubory : 4 ¤¤¤
[Suspicious.Path|Suspicious.Startup|VT.Unknown][Soubor] C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TEMP.bat -> Nalezeno
[PUP][Soubor] C:\Windows\SECOH-QAD.exe -> Nalezeno
[File.Forged|VT.Unknown][Soubor] C:\Windows\System32\drivers\usbd.sys -> Nalezeno
[File.Forged|VT.Unknown][Soubor] C:\Windows\System32\drivers\usbport.sys -> Nalezeno

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Samsung SSD 840 EVO 120GB +++++
--- User ---
[MBR] 3bd6c21b98e308feb4a265320937b748
[BSP] 07a2e987aed59a3467decd44cc81a71d : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 718848 | Size: 102224 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 210073600 | Size: 450 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD1001FALS-00E8B0 +++++
--- User ---
[MBR] 525cd145b98a1822b08dd9db14f97fa4
[BSP] f0cd8cc9342131c0eb230581047fe617 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 750000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1536002048 | Size: 203866 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan
- Pak klikni na "Prohledat " ,po jeho skončení:
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[Clorky]

RogueKiller V12.1.5.0 (x64) [May 2 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10240) 64 bits version
Spuštěno : Normální režim
Uživatel : Petr [Práva správce]
Started from : E:\Hlavní slo?ky\Sta?ené soubory\RogueKillerX64.exe
Mód : Smazat -- Datum : 05/05/2016 11:30:45

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 10 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6e1cbc1c-495c-4c84-9900-9ecd79bf5abb} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6e1cbc1c-495c-4c84-9900-9ecd79bf5abb} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2} | DhcpNameServer : 10.0.0.138 ([]) -> Nahrazeno ()
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nahrazeno (2)
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nahrazeno (2)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 3 ¤¤¤
[PUP][Soubor] C:\Windows\SECOH-QAD.exe -> Smazáno
[File.Forged][Soubor] C:\Windows\System32\drivers\usbd.sys -> Nahrazeno při restartu ( @Src E:\AppData\Local\Temp\snack\usbd.sys)
[File.Forged][Soubor] C:\Windows\System32\drivers\usbport.sys -> Nahrazeno při restartu ( @Src E:\AppData\Local\Temp\snack\usbport.sys)

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Samsung SSD 840 EVO 120GB +++++
--- User ---
[MBR] 3bd6c21b98e308feb4a265320937b748
[BSP] 07a2e987aed59a3467decd44cc81a71d : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 718848 | Size: 102224 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 210073600 | Size: 450 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD1001FALS-00E8B0 +++++
--- User ---
[MBR] 525cd145b98a1822b08dd9db14f97fa4
[BSP] f0cd8cc9342131c0eb230581047fe617 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 750000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1536002048 | Size: 203866 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

[Clorky]

Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Petr on źt 05. 05. 2016 at 11:31:57,74.
Microsoft Windows 10 Pro 10.0.10240 x64
Running in: Normal Mode Internet Access Detected
Launched: E:\Hlavní složky\Stažené soubory\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

5. 5. 2016 11:32:12 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Internet Download Manager deleted successfully
C:\PROGRA~2\COMMON~1\Chameleon Manager deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\IDM deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\admin\AppData\Local deleted successfully
C:\Users\Petr\AppData\Local\Black_Tree_Gaming deleted successfully
C:\Users\Petr\AppData\Local\CrashDumps deleted successfully
C:\Users\Petr\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Petr\AppData\Local\EmieSiteList deleted successfully
C:\Users\Petr\AppData\Local\EmieUserList deleted successfully
C:\Users\Petr\AppData\Local\MachineGames deleted successfully
C:\Users\Petr\AppData\Local\Opera Software deleted successfully
C:\Users\Petr\AppData\Local\PeerDistRepub deleted successfully
C:\Users\Petr\AppData\Local\Skype deleted successfully
C:\Users\Petr\AppData\Local\StardewValley deleted successfully
C:\Users\Petr\AppData\Local\WMTools Downloaded Files deleted successfully
C:\Users\TTA~1\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\TTA~1\AppData\Local\EmieSiteList deleted successfully
C:\Users\TTA~1\AppData\Local\EmieUserList deleted successfully
C:\Users\TTA~1\AppData\Local\VirtualStore deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B} deleted successfully
HKEY_USERS\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} deleted successfully
HKEY_USERS\S-1-5-21-1292206800-3816184836-4294836885-1001\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Internet Download Manager not found
C:\PROGRA~3\DivX deleted
C:\PROGRA~2\Subtitle And Video Renamer deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Petr\AppData\Local\AVAST Software deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\WINDOWS\Syswow64\GroupPolicy\gpt.ini deleted
"C:\Users\Petr\AppData\Roaming\DMCache" deleted

==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Petr\AppData\Local\Google\Chrome SxS deleted

==== Chromium Look ======================


Tampermonkey - Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo
Full Page Screen Capture - Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Reset Google Chrome ======================

C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Petr\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Petr\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=64 folders=53 136706202 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 05. 05. 2016 at 11:41:38,02 ======================

[Clorky]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:44:06, on 5. 5. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
CHROME: 50.0.2661.94

Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Petr\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Hlavní složky\Stažené soubory\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SteelSeries Engine] C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Petr\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [iFunBox] C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe /tray
O4 - HKCU\..\Run: [Lync] "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.2 ... rol_32.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{5b11aa51-3e65-4d6c-ac2b-5da5716333a4}: NameServer = 4.2.2.3,4.2.2.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{9867b728-1aa3-4b9b-ac0e-dd8f008a35e2}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: ACP User Service (amdacpusrsvc) - Advanced Micro Devices - C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDevice.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10191 bytes